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MEASUREMEhTT-BASED ADMISSION CONTROL 
UTILIZING EFFECTIVE ENVELOPES AND SERV ICE CURVES 

BACKGROUND AND SUMMARY OF THE INVENTION 
[0001] The present invention relates generally to network-based 
communication architecture. More particularly, the invention relates to providing 
controlled quality of service in packet-based networks through admission control. 

[0002] Currently much of the Internet is designed to provide *t>est effort" 
service. The Internet Protocol (IP) is designed to deliver packets of informatton to 
an ultimate destination through any available Internal links that enable delivery. The 
actual time it takes to deliver these packets depends on the route taken and the 
traffic congestion encountered en route. The original design of the Intemet Protocol 
focused on providing ultimate delivery, with the actual time to achieve delivery 
being only a secondary consideration. 

[0003] As the uses for the Intemet have grown, and as Intemet traffic has 
expanded geometrically, the original emphasis on delivery over timing is being 
challenged. With multicast applications and streaming audio and video applications 
growing in popularity, packet delivery time has become a central focus. Quality of 
Senrfce (QoS) is a term often used to describe the degree to which a 
communications network provides reliability, availability, and timely throughput. 
Quality of service addresses issues such as transmission speed, timeliness of 
packet delivery, amount of jitter a network introduces into packet streams, and the 
probability of outright packet loss. As businesses begin to rely more and more on 
their Internet presence, some have expressed willingness to pay more for higher 
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quality of service because tlie higher quality of service translates directly into a 
smoother, more responsive experience for their customers. Some Internet Service 
Providers thus offer different service level agreements through which they commit 
to provide different levels of sen/ice quality at different fee rates. 

[0004] There are many proposals for improving quality of service in packet- 
switched networks such as the internet Quality of service may be improved at the 
IndiNridual router level by making the routers faster and more intelligent. However, 
this also increases system cost. Other proposals address the quality of service 
issue at the network model level. At the network model level, the performance of 
individual routers are largely ignored; focus instead shifts to the aggregate 
perfonnriance of all routers in the network. One popular approach is to consider the 
aggregate network only in terms of its outer boundary or end-to-end performance. 
Using such an analytical approach, the performance of the entire network, and the 
quality of service it provides, can be largely controlled by the behavior of the routers 
occupying the edge of the network (that is, the routers at the Ingress and egress 
points). 

[0005] There are several end-to-end network models for controlling quality 
of service (QoS) in popular use today. Among the leading models are Integrated 
Services (IntServ), Multi-Protocol Label Switching (MPLS), and Differentiated 
Services (DiffSetv). IntServ supports a per flow quality of sennce guarantee. It 
employs a relatively complex architecture in which resources are resen/ed by 
means of a signaling protocol that sets up paths and resen/es resources. MPLS 
provides another quality of service guarantee approach that focuses on packet 
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foiwarding. Packets are assigned labels at the ingress of an MPLS-compatible 
domain. Subsequent classification, fonwarding, and sen/ices for the packets are 
then based on those labels. " - 

[0006] Models such as IntServ and MPLS address QoS on a per 
connection basis and can present scalability difficulties. To provide better 
scalability, other models have been proposed that address QoS on a traffic 
aggregate basis. DiffServ is one example of such a model. DiffSen^r provides quality 
of sersnce guarantees to packet aggregates by marking packets differently to create 
different packet classes/aggregates that are entitled to different quality of servtee 
handling. 

[0007] For the most part, aggregate traffic-based network models share a 
number of common concepts. They begin from a premise that the network can be 
characterized as having edge and core routers. The edge routers accept customer 
traffic 0'^-, packets from any source outside the network). The core routers provide 
transit packet fonwarding services among other core routers and/or edge routers. 
The edge routers control ingress of traffic and thus perform an important admission 
control function, by permitting or declining requests by outside traffic to enter the 
network. With the ultimate traffic flow being controlled by the edge routers through 
admission control, the core routers simply need to differentiate traffic insofar as 
necessary to cope with transient congestion within the network itself. The network 
models may employ statistical multiplexing to maximize utilization of the core router 
resources. 
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[0008] Predicting and csontrolling traffic flow through a network at an 
aggregate level is a very complex problem. Admission control aigorithnris that overly 
restrict ingress waste internal core router resources. On the other hand, admission 
control algorithms that are too lax can flood the network with too much traffic, 
resulting in severe drops in quality of service. Numerous admission control 
algorithms have been proposed and while some have been quite ingenious, there 
remains a great deal of room for improvement, 

[0009] For example, Centinkaya and Knightly, in an article entitled "Egress 
Admission Control," IEEE Info. Comm. 2000, describe a framework for scalable 
quality of service provisioning in whteh admission control decisions are made at the 
egress routers based solely on aggregate measurements obtained at the egress 
router. They introduce a measurement-based service envelope as a way to 
adaptively describe the end-to-end service received by a traffic class. 

[0010] For a more complete understanding of the invention, its objects and 
advantages, refer to the following description and to the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0011] Rgure 1 Is a networtc diagram illustrating an exemplary end-to-end 
network model, useful in understanding the admission control algorithm of the 
present invention; 

[0012] Figure 2 is a block diagram illustrating the pertinent parameters 
associated with arriving traffic and admitted traffic in a networtc; 
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[0013] Figure 3a is a flowchart diagram of the presently preferred admission 
control algorithm, illustrating global effective envelopes; 

(0014] Figure 3b is a similar flowchart diagram of the presently preferred 
admission control algorithm, illustrating local effective envelopes; 

[0015] Figure 4 is a graph illustrating the calculation of delay bound; 

[0016] Figure 5 is a timing diagram illustrating an example of a measured 
time interval, where T = 3t and M = 2; 

[0017] Figure 6a and 6b are graphs illustrating measured arriving traffic for 
time inten/al ^100 ms; 

[0018] Rgures 7a and 7b are graphs illustrating measured service envelope 
for time inten/al ^100 ms; and 

[0019] Figures 8a, 8b, and 8c are graphs of average link utilization as a 
function of delay bound for three different scenarios, for delay bound d ^100 ms. 

DESCRIPTION OF THE PREFERRED EMBODIMEm" 
[0020] A measurement-based admission control algorithm is based on the 
global effective envelopes of an arriving traffic aggregate and upon the service 
curves of the corresponding departing traffic aggregate. Such an admission control 
algorithm is well adapted to a variety of different network models. Although the 
algorithm will be principally described In the context of a multi-router network, the 
concepts employed are equally applicable to autonomous network systems and 
even switching devices. In a switching device, for example, the switch 
hardware/software provides for several Input ports and output ports. The present 
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invention may be used to control traffic flow among these input and output ports. 
Therefore, this algorithm is applicable to "networks" of different architectural 
granularities/ranging from single-device switches to large, multiple-device 
computer network domains. 

[0021] Refenrlng to Figure 1, an exemplary network is illustrated at 10. 
Network 10 includes a plurality of edge routers, such as router 12 and router 14, 
that are in turn connected to a plurality of core routers 16, For purposes of 
illustration, edge router 12 serves as the ingress node 18, and edge router 14 
serves as the egress node 20. Amving traffic enters through the ingress node 18 
and departing traffic leaves through the egress node 20, as illustrated. 

- [0022] For purposes of illustration, arriving aggregate traffic 22 comes from 
a second network 24 via edge router 26. For purposes of illustration, it will be 
assumed that a traffic conditioner or regulator functton 28 limits the flow of arriving 
aggregate traffic 22 to within predefined bounds. The traffic conditioner 28 may be 
located within the second network 24 (such as In edge router 26). The traffic 
conditioner or regulator 28 may be implemented at the ingress node 18 to force 
anriving traffic to comply with the traffic specification submitted by the sender. The 
traffic conditioner or regulator 28 may be modeled as a leaky bucket that provides a 
simple metering function. Alternatively, the traffte conditioner 28 may pro>^de more 
sophisticated traffic shaping functions where the temporal characteristics of a traffic 
class are selectively modified by delaying local packet fonwarding. For purposes of 
illustration, departing aggregate traffic 30 exits edge router 14 and enters network 
32. 
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[0023] Network 10 implements an admission control function 34 to 
determine which of the packets of arriving aggregate traffic 22 are admitted to the 
network 10 and which are "blocked. The admission control function 34 may be 
localized in a single router, such as edge router 12. Alternatively, the admission 
control function can be distributed across the network, with the function being 
performed by multiple routers within the network 10. The admission control functfon 
34 implements an admission control algorithm that is based upon a gtobal effective 
envekjpe 36 of the an-iving aggregate traffic 22 and upon service curves 38 of the 
departing aggregate traffic 30. 

[0024] Figure 2 illustrates network 10 with arriving traffic 22, admitted traffic 
46, and departing traffic 30 being shown in greater detail. The figure introduces 
ternis that will be useful in understanding the algorithm. 

[0025] Associated with arriving traffic 22 is a detemiinistlc envelope 42. The 
deterministic envelope may be characterized in terms of three variables: peak 
traffic rate, average traffic rate, and burst size parameter. The arriving traffic 22 also 
Is assumed to have an associated quality of servtee requirement 44. Typically each 
class of service would have its own quality of service requirement. Thus multiple 
QoS requirements are illustrated at 44 in Figure 2. The QoS requirements may be 
characterized by the following variables: probability of delay violation and delay 
bound. 

[0026] The admitted traffic 46 may be differentiated from the arriving traffic 
22, in that the adm'rtted traffic 46 has already passed the admission control point 
and is thus currently flowing in networi< 10. When the admitted traffic 46 leaves 
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network 10, It is called departing traffic 30. The departing traffic 30 fias associated 
with it a service curve or service envelope 48 tliat is measured by monitoring each 
pacl<et's arrival time and departure time. 

[0027] One variation of the admission control algorithm uses the associated 
deterministic envelope 42 of the an-iving traffic 22 and the associated service 
envelope 48 of the departing traffic 30 in mal<ing a decision whether to admit or 
deny arriving traffic 22. Figures 3a and 3b show the presently preferred algorithm in 
flowchart form. A more rigorous mathematical derivation of the preferred algorithm 
is presented below. The flowcharts of Figures 3a and 3b make reference to specific 
equations from the detailed mathematical derivation, where applicable. A 
discussion of the flowchart will be presented first, as a way of Introducing the 
detailed mathematical derivation that follows. Specifically, Figure 3a applies to 
global effective envelopes; Rgure 3b applies to local effective envelopes. TTie 
content of these two figures is similar; hence a detailed discussion of Rgure 3a is 
presented below and may be considered applicable to Figure 3b, except where the 
mathematical derivation differs, as will be evident by comparing the Figures. 

[0028] Referring to Figure 3a, the preferred algorithm begins at step 60 with 
a request to be admitted to the network. As part of the request, the incoming traffic 
submits its traffic characterization, which is expressed in terms of characterlzatton 
parameters 62. The specific parameters used by the presently preferred 
embodiment are: 

■ Deterministic Envelope Aj*(T); 

■ Quality of Service Requirements, CtoS; 
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■ Delay Bound, d; 

■ Probability of Delay Violation, e. 

[0029] Next, at step 64. the algorithm constructs a global effective envelope 
for the arriving traffic, based on the submitted parameters 62. In the mathematical 
derivation that follows, the global effective envelope for arriving traffic is 
characterized as Gnew The Gnew envelope is depicted In Figure 3 at 66. As 
indicated by the dashed lines and bracketed notation, step 64 is perfomned using 
equations 3.8-3.11, 

[0030] The algorithm continues at step 68, where a global effective 
envelope for the admitted traffic is constructed based on measured statistics. 
Specifically, the measured statistics, listed at 70, include the average and the 
variance of the amount of arriving aggregate traffic* In the detailed mathematical 
derrvation which follows, the global effective envelope for admitted traffic is 
designated as GJJ^ . In Rgure 3, this G^^ envelope is shown at 72. 

[0031] The final admission control decision, step 74, Is made based on an 
analysis of both global effective envelopes 66 and 72, along with the service curve 
40 calculated using equation 4.5 and the algorithm shown in Table I below. 
Specifically, the admission control decision will admit incoming traffic rf; 

For a more precise statement of the above admission control condition, see the 
following detailed description and, in particular, Eqn, (3.12). 
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Detailed Description of Preferred Admission Control Algorithm 

[0032] A detailed description of tlie preferred algorithm wjjj now be 
provided below. For purposes of illustration, a Differentiated Service (DS) or 
Diffserv architecture will be assumed. The invention is not limited to the OS 
architecture inasmuch as the admission control algorithm of the invention may be 
used with a variety of network archrtectures. 

[0033] In order to provide Quality of Service (QoS), the Integrated 
Services (IS) architecture uses a signaling protocol to set up resource 
reservations at all routers along the path. Since this approach requires that all 
routers have to keep per-flow state and process the per-flow resource 
reservations, this approach has known scalability problems. Differentiated 
Service (DS) is another approach to provide QoS, but without the restriction on 
scalability. Routers need only implement scheduling and buffering mechanisms 
and apply them based on the DS Code Point (DSCP) presented In the header of 
arriving packets. The end-to-end QoS service across several domains Is built by 
combining the per domain behaviors (PDBs) of Individual DS domains. PDBs, an 
active area of research, are constructed by an appropriate deployment of per-hop 
fonwarding behaviors (PHBs). Several DS domains can exist within a single 
autonomous system (AS). DS addresses scalability by providing QoS 
guarantees on an aggregate traffic level. 

[0034] As discussed above, one of the critical requirements for sen/ice 
provisioning across a DS domain Is the presence of an effective Connection 
Admission Control (CAC). Such admission control can be utilized while 
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establishing dynamic service level agreements (SLAs) for premium service 
across DS network, or consulted upon re-negotiations of static SLAs. A 
Bandwidth Broker (BB) entity of a DS domain is a typical place for such 
admission control. The drfficulty involved in designing an effective CAC is that 
many solutions lead toward topology-dependent implementations, thus limiting 
their scope and increasing their complexity. 

[0035] To implement admission control for DS without scalability 
problems, several researchers have proposed various forms of Endpoint CAC, In 
this design, the endpoints of a DS domain (Ingress/egress routers) perform 
admission control and resource management The routers measure traffic in the 
network to detect the level of available resources and admit a new connection if, 
and only if, the detected level of resource is sufficiently high. 

[0036] The preferred embodiment provides a measurement-based CAC 
algorithm, which provides statistical QoS guarantees on a traffic aggregate level 
in a DS domain. The ingress traffic amving at the boundary of a DS domain is 
assumed to be conditioned by the upstream domains, policed by our domain to 
adhere to the rules of an established SLA. and further marked with the 
appropriate DSCP. Leaky-bucket based policers, shapers and markers are 
widely proposed. As the DS architecture extends some PDB for a traffic 
aggregate, we call this traffk: aggregate a class in a subsequent discussion 
(different from DS class). We target the PDBs, which offer delay guarantees to a 
classified traffic aggregate given both delay and delay violation probability. We 
describe the deterministic envelopes, i.e., arriving traffic envelopes and sen^lce 
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envelopes, and the bound on performance characteristics that can be obtained 
from those envelopes. We then derive a measurement-based CAC to establish 
dynamic SLA and provide statistical guarantees for a variety of service classes 
by exploiting the statistical traffic envelopes, called global effective envelopes 
and service curves. To obtain these envelopes, we use the measurement 
approach. The measurement of the sen/ice curves allows our admission control 
condition to work without the knowledge of the topology of the DS domain and 
cross traffic in the domain. 

[0037] Let us consider a traffic arriving to a network domain. The traffic 
enters the domain at an ingress node 18 and destines to an egress node 20 (see 
F^ure 1). In the following we consider a continuous-time fluid flow traffic model. An 
arriving traffic from different ftows is differentiated by its QoS requirements. Here we 
consider the probability of delay violation and the delay bound as the QoS 
requirements of interest. An aniving traffic with the same QoS requirements, i.e., 
the same delay bound and probability of delay violation requirements, is treated as 
a service class. Hence, traffic arriving to the domain is p€u1itioned into Q classes. 
We use to denote the number of flows within a class q . 

[0038] The arriving traffic from the flow j of the class q in an interval 
(f^r^) is denoted as A](tyj^) . We assume that traffic arrival from each flow ; is 
regulated by a traffic conditioner and upper bounded by a deterministic subadditive 
envelope Af (r) as follows: 

u^;(r,r + T-)<Af (r) VrSO, Vr>0. (2.1) 
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[0039] The arriving traffic is characterized by the deterministic envelope 
with a set of parameters. The most commonly used traffic regulatore are leaky 
buckets with a peak rate enforcer. The traffic on flow j is characterized then by 
three parameters (P.^aj^Pj) with a detemninistic envebpe given by 

Af (r) = min{P/r,crJ+p;r) Vt^O (2.2) 

where Pf ^ is the peak traffic rate, pj is the average traffic rate, and <tJ is the 

burst size parameter. 

[0040] As a generalization of the peak-rate enforced leaky bucket, the traffic 
on flow j may be characterized by a set of parameters {(t%,p%}^_^^ , with a 
deterministic envelope 

(2-3) 

where AT? Is the number of leaky-bucket pairs. 

[0041] It is also noted tinat flows from the same sendee class can be 
characterized by different detemninistic envetopes, but still have the same QcS 
requirements. 

[0042] We use Af^it^j^) to denote the traffic from flow j of the class q 
leaving the domsun at the egress node in an Interval it^,t2). We then define the 
aggregate traffic of class q as follows: the aggregate of arriving traffic 
Aj,Ah^h)= S and the aggregate of departing traffic 

^^(^>^)= S AJ'""(/j,r2)- For a time interval of length j3 , v^e deTine nie empiricai 

. envelope, Ef^^{T,p) of an arriving aggregate of flows from class q , which is the 
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upper bound of the arriving aggregate in any time interval of length i:<p as 
follows: 

E^,{t\0)= sup A^(r,r + r) (2.4) 

[0043] In the following, we will focus our discussion on the aggregate traffic 
of a single service class and drop the index 'q\V^B will introduce the definition of a 
service curve and its application. We assume that there is no traffic in the domain at 
time r " 0 . Therefore, for an aggregate traffic, the amount of baoklogged traffic in 
the domain at any time t , Bit) , is given by 

B(t) = A^(0.t)'ATiOj)>0. (2.5) 
Also the ingress-to-egress delay suffered by the aggregate traffic at time r Is 
denoted by d(t) and is defined as follows: 

d(t} = min{z : 2 > 0 and (0. t) £ (0,^ + z)} (2.6) 
Definition of Service Curve 

[0044] Let S(') be a non-decreasing function, with 5(0) = 0. We say that 
the domain guarantees the service curve 5(0 for the aggregate traffic rf for any 
time t , there exists s £ t such that Bis) = 0 and is,t) >Sit-s). 

[0045] It can be seen that 5(/ - s) specifies the lower bound of the amount 
of the aggregate traffic needed to be served and depart from the domain during 
some interval is,t) , where the domain is empty at time j . 

[0046] From the definition of service curve, the upper bound of delay can be 
obtained as follows. Consider a busy period of length^. Let s denote the starting 
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time of the busy period, that is, = 0 and A;, (0,5) = Arco,^). We assume that 
the domain guarantees the service curve 5(0, tl^t is Al^{sj)>S{t-s), where 
s<ti'd<:0. From the definition of service curve, we have 
A7(^,f + ^/) = A7(0,r + rf)-A^(0,j)>S(r + i/-5), From Eqn. (2.6), thus, A^(0,0^ 
AT(0,t + d)>Aj^(0,s)^S(t'^d-s). Hence, from Eqn. (2.4), 

A^ (s,t)^E^Q'S\jS)>S{t'\-d- s) (2.7) 
[0047] Defining r = r - ^ , it follows that, for all time f > 0 ^ the delay defined 
in Eqn. (2.6) is upper bounded as follows: 

d{t)<Tmn{z : 2 > 0 and E^{z\0) < 5(t + z)} 

^ max inin{? : z ^ 0 and (t; fi) ^ 5(r + z)} (2.8) 

From Eqn. (2.8). it is noted that the upper bound on delay Is the maximum 
horizontal distance between the arriving aggregate envelope {Ef^(T;0)) and the 
service curve S(t) (see Figure 4). It is also noted that 0 Is upper bounded by 
fioBXf which is the maximum busy period of the aggregate traffic and can be 
determined as: ^ inf{r> 01 Z A!(r) < S(t)] , Therefore, we will use ^ = >!?^„ 

in the following discussions. 

[0048] The preferred admission control algorithm exploits the detemrtinistic 
envelopes and the service envelopes to obtain the upper bound of the delay 
experienced by an amving traffic based on the worst-<:ase scenario where it is 
assumed that all flows send traffic with their peak rate simultaneously. 

[0049] In the next section, following the concept of the described envelopes, 
we will derive a statistical service where a small portion of traffic is allowed to 
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violate the delay QoS requirement. We will use so called global effective envelopes 
to characterize arriving aggregate traffic for each class. Using these envelopes 
allows us to derive a CAC for statistical services which can be created in the same 
fashion as for deterministic services. 

Probabilistic Guarantees with Eff^tive Envelopes and Service Curves 

[0050] In this section, we derive the probability of delay violation based on 
the upper bound of the delay shown in the previous section. We then obtain an 
admission control condition for a single service class by applying the definition of 
local and global effective envelopes presented in R. Boorstyn, A. Burohard, J. 
Uebeherr, and C. Oottamakorn, Effective envelopes; Statistical bounds on 
multiplexed traffic in packet networks, Proceedings of IEEE Into. Comm. 2000, Tel 
Aviv, Israel. March 2000 {hereinafter "Boorstyn, et aL"), We finally discuss the 
admission control conditions for multiple service classes. 

Probablllstte Guarantees with Local Effective Envelopes and Service Cun/es 

[0051] Again we will first consider a single sennce class, allowing us to drop 
the index An aggregate of arriving traffic from the same service class A^{t^,t^) 
has the same probability of delay violation, e , and delay bound requirement, d . 
AjyC^i./j) are upper bounded by a family of nonnegative random processes 
Aj^(tyj^)y which have the following properties: (1) Stationarity: the statistical 
properties of A^(t^,t^) do not change with time, and (2) Independence; The 
(r, ) are stochastically independent among all service classes. 
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[00S2] Let Df,iT) denote the ingress-to-cgress delay experienced by a bit 
of an aggregate traffic of the iv flows arriving at the domain at time t . We assume 
that Df,(T) is a random variable. For a given delay bound d, the domain 
guarantees that the ingress-to-egress delay of any arriving bit will not exceed the 
delay bound d\ that is, for all time t>0,0£T£B^, from Eqn. 
(2.Q),D^(T) = trdn{z:z^0 and (r,* + r) ^ 5(r+z)) <d or, for all time r>0. 
Oir<B^, (r.r + r) < S(r + rf) . The delay violation occurs if BD^ (r) such that 

or, 3r such that 

A^(/,r+r)>5(T+rf) 
[0053] With Eqn. (2.8), the probability that the arriving traffic experiences a 
delay violation is required to be bounded by e and we have, for all time rSO. 

Pr[D;,(T)>rf] = ?i[Af,(t,t + T)>Sit + d}] < e (1) 
When a set of new flows requests the same service guarantees from a DS 

domain, the CAC uses the admission control test to ensure that the requested 

service guarantees and other flows from all service classes can be 

simultaneously satisfied. From Eqn. (1), we can obtain the admission control 

condition for a single service class by using the definition of local effective 

envelope as follows: 
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Definition (Local Effective Envelope) 

[0054] A local effective envelope for Af,it,t+T) is a function L„ that 

satisfies for all r > 0 and all r 

Pt[A^,it.t + T)<L^iT,£)]>^-e 
It can be seen that a local effective envelope provides a probabilistic bound for tlie 
aggregate traffic A,, (t,t + r) for any specific time Interval of lengtli t . 

Lemma 

[0055] Given a set of flows that is partitioned into M classes, each dass 
contains flows with aggregate arrivals A^_. Let Lf,^(r,€) be the local effective 
envelope for class m . Then the following inequality holds: given x. 

if 5]L„Jr,e)^jr,thenforalI t, TeT\^A^Jt,t+T)>x <M-e, - 

m L 1)1 . 

We divide flows from the same service dass into two categories, i.e. M ~1. The 
first group is the set of flows, N , that are already admitted to the domain. The 
second group is the new set of flows, K, requesting the QoS sendee from a DS 
domain. We denote as the local effective envelope of the first group and as 
the local effective envelope of the second group. 
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Admission controi condition for a single service cias5 

[0056] Using tlie definition of the local effective envelope and the lemma, 

from Eqn. (1) we have that the arriving traffic has a delay violation with probability 

<e if 

L^(r.£/2) + L^,(r;f/2)<5(r+rf).for 0<t<B^ (2) 
[0057] it, for the same service class, the set of new flows are regulated by 

different deterministic envelopes A* , each set of flows sharing the same A] have a 
different envelope lL,(.:£j), where J.^j = £/2. Therefore Eqn, (2) becomes 

[0058] The CAC in Eqn. (2) does not depend on the topology of the domain 
and the scheduling algorithms within the domain, but the measurement-based 
traffic-characterized envelopes, which can i>e measured at an ingress and an 
egress node in a DS domain. 

Local Effective Envelope using Measured Moment 

[0059] We consider a set of admitted flows, N . We characterize the 
distribution of the aggregate traffic using the Central Limit theorem, which does not 
require knowledge of the underlying distributions of each flow. An approramate local 
effective envelope of the aggregate traffic can be obtained from the Central Limit 
Theorem as follows [11. From the definition of the local effective envelope, we set 
Pr[A^ (t,t + T)>x]=>e/2 and we obtain. 

(r.f /2) = X(T) + z(j(t) (4) , 
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where z has the approximate value z ~ Jlog(2^ , and X(r) and <t'(t) are 

measured average and variance of the amount of aggregate traffic, respectlvety. 

We will discuss those measurements In the next section. 

[0060] Since the number of new flows may be few, the Central Limit 

theorem may not be the appropriate choice for constructing their local effective 

envelope, i.e.. the bound obtained may not be light enough. Instead, we will use the 

Chemoff bound, which provides a more rigorous bound on the aggregate traffic. 

The local effective envelope of a set of new flows, K. can then be obtained by 

using the Chernoff bound, and is given as follows: 

Recall the Chemoff bound for a random variable Y : 

Pr[y£y]<e-^E[e^] Vj>0 (5) 

We have 

PrK(r,/ +r) > Kx]<.e-'^yi^{5,T) , (6) 
where Mg(s,T) is the moment generating function of frie aggregate traffic. 

[0061] In Boorstyn, et al., M^(s,t) is derived and given in terms of the 

deterministic envelopes of the flows, which are the leaky budget function in our 

case, s is chosen so that Eqn. (6) is minimal. These values of * and Mj^ (s.r) yield 

L^(r,e/2) = K min{x, A;;,(r)} (7) 

f ^l^f A;(t)-Pt\-^^ < (^^2)"- (8) 
where A* (r) is a deterministic envelope for each new flow. 
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Admission control condition for multiple service classes 
[0062] The admission control condition in Eqn, (2) does not guarantee tinat 
QoS requirements of other service classes using the isame ingress^o-egress path 
will be satisfied if a new set of flows is admitted into the domain. To be able to 
provide that guarantee, without loss of generality, we assume that the new flows 
have the highest priority, and we test the admission control condition for each of the 
service classes. This can be shown as follows. For each service class we obtain an 
aniving aggregate traffic envelope L% {T,eJ2) and a sendee envelope 5^0- 

From Eqn. (2), the new flows with an arriving envelope L^{r,eJ2) will be 
admitted if the following condition Is satisfied: for all sen/ice classes q , 
L^/T;^,/2) + L^(r,f^/2)<5''(r+d,) ,for05rS5^ (9) 

[0063] In this section we show our CAC, which depends on the 
measurement-based envelopes (L^^O;^) and Si-)). In the ne)ct section we show 
how to obtain these envelopes. 

Probabilistic Guarantees with Global Effective Envelopes and Sen/ice Ounces 

[0064] In this section, we derive the probability of delay violation based on 
the upper bound of the delay shown in the previous section. We then obtain an 
admission control condition for a single service class by applying the definition of 
global effective envelope presented in Boorstyn, et al. We finally discuss the 
admission control conditions for multiple service classes. 
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[0065] Again we will first consider a single service class and drop the index 
*q\ An aggregate of arriving traffic from the same service class in the interval 
{t,,t^), Aj,{t^J2)* has the same QoS requirements: probability of delay violation e 
and delay bound requirement d. Af^(t^,t^) is characterized by a family of 

nonnegative random processes, which have the following properties: (1) 
Stationarity: the statistical properties of Aj^(t^,t^) do not change with time, and (2) 

Independence: The A^(ri,r2) ^®re stochastically independent among all sen/'Ice 

classes. Consider an inten^l of length of the maximum busy period J3 . Let D^(t) 

again denote the ingress-to-egress delay experienced by a bit of an aggregate 
traffic of the N ftows arriving at the domain at time r during the busy period. We 
assume that D^^ (t) is a random variable. 

[0066] For a given delay bound d , the domain guarantees that the ingress- 
to-egress delay of any an-iving bit will not exceed the delay bound d ; that is, from 
Eqn. (2,8), for all 0<t</9. 

Z)y(0 = miii{z:z>0 and sup A;v(r,r + T)<S(r+0} Srf (3.1) 

or, for all r, O^r^fi, 

sup A^it,t + T) = Ef,iTj)<SiT-hd). (3,2) 

The delay violation occurs if 3D^ (t) such that 
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or, 3?,r such that 

sup Aj^{t,t-^T)> S(T-^d) 

Witti Eqn. (3.2), the probability that the arriving traffic experiences the delay 
violation is required to be bounded by s and we then have 

Pr[Djv(r)<rf,Vr,r] = Pr[£:^(r;^<S(f-hrf),forallr,0£r£A] < 1-f (3.4) 

[0067] Suppose a set of new flows requests the same sendee guarantees 
from a DS domain. The CAC uses the admission control test to ensure that the 
requested service guarantees and other flows from all service classes can be 
simultaneously satisfied. From Eqn. (3.4) we can obtain the admission control 
condition for a single service class by using the definition of global effective 
envelope as follows: 

Definition of Global Effective Envelope 

[00^] A global effective envelope for an interval of length ^ is a 
subadditive f uncdon (r, 0, e) that satisfies: 

It can be seen that a global effective envelope provides a probabilistic bound for the 
aggregate traffic A^{ta + r) for every time interval of length r in 0. 
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Lemma 



[0069] A set of flows is partitioned into M classes, and each class contains 
flows with aggregate arrivals A^^^. Let G^jT;j3,e) be the global effective 
envelope for class m , Then the following inequality holds: given x, 



We divide flows from the same service class into two categories, I.e., Af = 2 . The 
first group is the set of flows,//, that are already admitted to the domain. The 
second group is the new set of flows, K , requesting the QoS from the DS domain. 
We denote as the global effective envelope of the first group and as the 
global effective envelope of the second group. 

Admission Control Condition for a Single Service Class 

[0070] Using the definition of the global effective envelope and the lemma, 
from Eqn. (3.4) we have that the arriving traffic has a delay violation with probability 

<€ tf 



[0071] If. for the same service class, the set of new flows are regulated by 
different deterministic envelopes A] , each set of flows sharing the same a] require 

a different envelope G^^(';j3,€j), where ^£j=^s/2. Therefore Eqn. (3.5) 
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[0072] The CAC in Eqn. (3.5) does not depend on the topology of the 
domain and the scheduling algorithms within the domain, but the measurement- 
based traffic-characterized envelopes, which can be measured at an ingress and 
an egress node in a DS domain. 

Constructing the Global Effective Envelope 

[0073] We consider a set of admitted flows, N . We characterize the 
distribution of the aggregate traffic using the Central Limit theorem, which does not 
require the knowledge of the underlying distributions of each flow. An approximate 
global effective envelope Gy(r.^,£)of the aggregate traffic can be obtained from 
the Central Limit Theorem as follows. From the definition of the global effective 
envelope, we set ^[E^ {T\fi)>x, VO < r < « ^ . For given t^.fi yNe then have. 

for every integer k , 

) « ciX{(k + , \/r^[t,,fi] (3,7) 

where a = !+!/(* +1), z' has the approximate value z' = ^|log(2^')| with f' = 

Tf^(a~l)£/ /3k , and X(t) and a^(t) are measured average and variance of the 
amount of aggregate traffic, respectively. We will discuss those measurements in 
the next section. 

[0074] From Eqn. (3.4) It can be seen that there are several possible global 
effective envelopes. For given t^.^, the method recursively calculates the 
it., or., and r. for 15i^n, where is the first point which Is greater than fi. We 
can therefore obtain n points of a global effective envelope as follows: 
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= Z 



Z + 



a. = 1+- 



(3.8) 

(3.9) 
(3.10) 



(3.11) 



and, from Eqn. (3.7), . 

e) « a\X{{k. + fk, }+ z'a{ik., +1)r,/jt,)] 
where 2=Jiog(2^. 

[0075] For a set of new flows, one can obtain the global effective envelope 
of the new flows by using the same recursive method as follows. However, 



instead of using the measurement-based X{t) and <T'(r) in Eqs. (3.8) and (3.11), 



X{t) = Kpf,T and c7*(r) = X/7^T(A;^(r)-/7^r), where is the long-term average 
and A\ (r) is a detemiinlstic envelope for eeu;h new flow. 



Admission Control Condition for Multiple Service Classes 

[0076] The admission control condition in Eqn. (3.2) does not guarantee 
that QoS requirements of other sen/ice classes using the same ingress-to-egress 
path will be satisfied if a new set of flows is admitted into the domain. To be able to 
provide their guarantees, without loss of generality, we assume that the new flows 
have the highest priority and we test the admission control condition for all the 
service classes. This can be shown as follows. For each service class we obtain an 
arriving aggregate traffic envelope G^ (,r,fi,e^/Z) and a service envelope $"(•), 
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From Eqn. (3.5), new flows, which have an arriving envelope G„^^(r,/3,e^/2), will 
be admitted if the following condition Is satisfied; for all service classes q , 

(^^ ^. ^, /2) + G„^ (r, A /2) £ 5" (T + d,^ ) , for 0 ^ T < 5 (3.12) 

In this section we show our CAC, which depends on tiie measurement-based 
envelopes {G p,e) and 5(-)). In the next section we show how to obtain these 
envelopes. 

Measurements of Perspective Envelopes 
[0077] In this section we show how to measure the charactenstic 
parameters for constructing the global effective envelopes of the arriving aggregate 
traffic and the service envelope of the departing aggregate traffic for a single 
service class. First we measure the average and variance of the amount of arriving 
aggregate traffic, which are used In Eqn, (3.3). We then measure the sendee 
envelope of a single service class traffic. At the end of this section we show the 
admission control algorithm that we will use in the evaluation example below. 

iVIeasurement of Aggregate Arriving Envelopes 

[0078] We are interested in the aggregate characteristto of an arriving traffic 
at ingress node. To characterize the aggregate traffic as a Gaussian process, we 
need to nneasure the first and second moment of the amount of traffic arriving at the 
ingress node. l£)'lA^{t^,t^) denote the arriving traffic from an aggregate flow in the 
interval (/,,rj). Consider time to be slotted with equal length z\ I.e., for IwlPEG 
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sources, we can think of r as the frame time. We also divide time into M large 
intervals whose length is T (see Figure 5). For the m'* interval we obtain the bound 
of an arri\ring traffic as a function of time inten/a! kt. The bounded amount of 

the measured traffic over the rrf^ interval of length T from the current time / can be 
obtained as follows: 

Xj^" = max A[t'-/nr + nr,f-/nr + (n + ;t)r] (4.1) 

T 

form=1, Mand/c«1, .... — . 

r 

[0079] Thus for every T time slot, the bounded envelope is obtained. 

From these envelopes we can obtain the average X^ and the variance al of the 
measured envelopes as follows: 

^*=Z^r (4.2) 



and 



[0080] T , r , and M are the key parameters for the measurement. An 
improper choice of t, T, and M may lead to inaccurately characterizing the 
arriving aggregate traffic and consequently overestimating the bandwidth required 
by connections. We varied these parameters in our approach and found that our 
approach Is not very sensitive to such changes. Further discussion of how to 
choose the parameters can be found in C. Cetinkaya and E. Knightly, Egress 
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Admission Control, In Proceedings of IEEE Info. Comm. 2000, Tel Aviv, Israel, 
March 2000; and D. Tse and M. Grossglauser, Measurement-Based Call 
Adrriisslon Control: Analysis and Simulation, In Proceedings of IEEE Info. Comm, 
1997, Kobe, Japan, April 1997. 

[0081] We provide an example of an arrival envelope from a simulation 
experiment in Figures 6a and 6b. In Figure 6a, we plot the amount of arrival 
aggregate traffic as a function of time inten/al, while Figure 6b depicts the amval 
aggregate rate as a function of time interval. The simulation consists of 120 
multiplexed independent MPEG-2 video traces. These traces are obtained from the 
movie "Starship Troopers" {"Starshiif), Starship has a peak rate of 18.6336 Mbps 
and an average rate of 4.26 Mbps. The frame rate of Stanship Is 30 frames per 
second. This type of traffic has a large peak-to-mean ratio, Indicating significant 
burstiness. From Figure 6, the amVing envelope and anival rate are signrficantly 
smaller than the peak envelope and peak rate, respectively. This Is due to the 
statistical multiplexing of the traffic aggregate. As the figures show, given a long 
time interval, the amount of the arriving traffic and its arrival rate decrease toward 
the average rate. 

Measurement of Aooregate Service Envelopes 
[0082] Consider traffic am'ving at a DS domain at an ingress node and 
leaving at an egress node. For measuring service envelopes, we assume that the 
clocks in the domain are synchronized. We consider a packet system where 
packets are senaced at discrete times rather than continuous times. Each packet 
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arriving at the ingress node will be time-stamped. Hence, at tlie egress node, we 
are able to detemiine the ingress-to-egress delay of each packet. Let denote the 
arriving time and denote the departure time of the /" packet. We oonskler this 

trafffc to be backlogged whenever at least one packet remains In the system. The 
backlogging condition can be checked by comparing the arriving and the departure 
times of packets. Traffic is continuously backlogged for k packets in the Interval 
ta;,rfy^i_J if 

> , for all 0 < w < * - 2 (4.4) 

forks 1. 

[0083] Next, let ServErw be a list containing {x,s){x)) pairs which 
represent the amount of time5j*(jc) required to service x bits when considering the 

packet y with k backlogged packets. Again consider an interval of length T, which 
contains the total number of arriving packets n. For packet /, we consider the delay 
of the packet and also the delay of the packets backlogged after this packet. We 
thus can define S)ix) as follows: 

S';ix) = d.,,_,-a^ (4.5) 
for all k ^ 1 which satisfy the backlogging condition. 
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A bounded service envelope can be obtained as follows: 

forpacfcct y = 1 to W _ . . 

5) <- rf,-a, 

x(S]) <- Siw (packet (/)) 

k <- 2 

x<JS)) < - jc(5*'0 +Sizc(pack«(y-»-A-l)) 
k <- A +1 
Mage {ServEny, ( xiS] ) . 5) ) Vife . 5cnf£>tv) 
for I -(Leagth(S;?/v£nv)-l)ioO 
if<40 <**-!]) 

Remove ( 4* " 1] » ^« - 1 J) 
Using Sfi/v£>ii^ 10 plot a strvicc covdopc. 



Table I Bounded Service Algorithm 

[0084] Figure 7a shows a sendee envelope of an aggregate of departing 
traffic obtained from a simulation. The simulation consists of a node with a 622 
Mbps link and the same number of sources (Starship) used for Figure 6a and 6b. It 
is noted that the envelope is an increasing function. In addition, Figure 7b depicts 
the slope of the service envelope. The slope of the envelope Indicates variation of 
the service rate for the burstiness of the anfving aggregate flows. 



Admission Corttrol Algorithm using local effective envelopes 

1. To request the QoS for its traffic from a DS domain, the user submits to a 
BB its traffic characterization containing A*(t), QoS requirements, dand 
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II. CAC constructs a local effective envelope, L,^, based on the submitted 
parameters by using Eqs. (7) and (8). 

III. CAC then uses the measurement of the average and variance of arriving 
traffic to constru<s local effective envelopes for admitted flows, Ll,^ , from 
Eqn.(4). 

IV. CAC finally mal<es an admission control decision based on L^, , and 

S" obtained from the previous section. The request is accepted if the 
condition in Eqn. (9) is true. 

Admission ControJ Algorithm using Global Effective Envelope 

I. To request the QoS for its traffic from a DS domain, the user submits to a 
BB its traffic characterization containing A'jit), QoS requirements, Jand 

II. CAC constructs a global effective envelope. , based on the submitted 
parameters by using Eqs. (3.8) - (3.1 1). 

III. CAC then uses the measurement of the average and variance of arriving 
traffic (obtained from Eqs. (4.2) and (4.3) respectively) to construct global 
effective envelopes for admitted flows. G^^ . from Eqs. (3.8)-(3.l 1 ). 

IV. CAC finally mal<es an admission control decision based on G , Gl . and 

5» obtained from the previous section. The request is accepted if the 
condition in Eqn. (3.12) is true. 
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Evaluation and Simulation Results 
[0085] In this section, we evaluate the effectiveness of our CAC condition. 
We consider a case where all flows are homogeneous, I.e., all flows satisfy the 
same detenninistrc envelope and require the same delay QoS guarantee from a DS 
domain. Starship is again used as a traffic source. For simulations, we set the 
probability of delay violation ^ = 10"^ and vary the delay bound requirement d . We 
consider a DS domain, which has an egress node with a link capacity of 622 Mbps 
(C = 622 Mbps for all simulations). All links in the domain have the same capacity 
as the egress link. Each node has a FIFO scheduler. We consider three scenarios 
where the number of nodes and amount of cross traffic in the domain are changed 
as follows: 

I The DS domain consists of a node without any cross traffto (see Rgure 8a). 

II. The DS domain consists of two nodes without any cross traffic (see Rgure 
8b). 

III. The DS domain consists of three nodes with some cross traffic (see Figure 
8c). 

Note that in configuration III, we use 40 flows of Starship as cross traffic requesting 
the same QoS requirements as the main traffic. 

[0086] We will evaluate our approach ('Approach') by using the CAC 
algorithm described above. As benchmarks for our approach, we also investigate 
two of the following approaches and a set of simulations ('Simulation'). First, we 
consider average rate allocation {'Average Rate'), where the maximum number of 
admissible ftows is determined by the link capacity divided by the long-term 
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average rate of each flow and, therefore, the average link utilization for this 
approach is unity. Second, we consider the peak rate altocation ('Peak Rate'), 
where the maximunn number of admissible flows Is deterrriiried by the link capacity 
divided by the peak rate of each flow. For simulation purposes, each flow starts 
randomly sending traffic into the DS domain. Many simulations are performed. The 
average result of the simulation Is presented. We compare the average link 
utilization, , obtained from each approach. is defined as follows: 



where N Is the number of connections admitted to the domain, pj is the long-term 
average rate of each flow, and C is the link capacity at the egress node. 

[0087] Rgures 8a-8c show the three scenarios we investigate and the 
corresponding results where the average link utillzatfon is a function of the delay 
bound. From the results, the link utilization obtained by the simulations and our 
approach is considerably higher than the one obtained by the peak rate allocation. 
This shows that the simulations and our approach can exploit the multiplexing gain 
from the traffic aggregate and, hence, yield high link utilization. For example, from 
Figure 8a, for the delay bound d = 10 ms, the simulation and our approach yield 
86% of the link utilizatton while the peak rate allocation can only achieve 82%. In 
addition, the results show that our approach can accurately characterize arriving 
and departing aggregate traffic, Figures 8b-8c show that our approach can 
detennine an accurate condition of the domain without the knowledge of the 
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underlying topology and cross traffic, and yield link utilization close to simulation 
results. 

[0088] From the foregoing it will be appreciated that the measurement- 
based admission control algorithm exploits global effective envelopes and 
service envelopes to accurately characterize arriving and departing aggregate 
traffic. The CAC algorithm is tunable through a set of parameters. The algorithm 
is scalable and can support a variety of service classes. We showed the 
effectiveness of the CAC algorithm by comparing the link utilization obtained by 
the algorithm to results from simulations. While the invention has been described 
in its presently preferred form, it will be understood that the principles of the 
invention may be applied to many applications and that implementation details of 
the algorithm can be varied without departing from the spirit of the invention as 
set forth In the claims. 
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